You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
srtp
About this tag
The srtp tag on WindowsForum.com covers discussions about Secure Real-time Transport Protocol (SRTP) in the context of enterprise communication platforms like Microsoft Teams and Zoom. Recent content highlights a post-exploitation technique called Ghost Calls, where attackers abuse TURN infrastructure to tunnel command-and-control traffic through WebRTC media flows, bypassing firewalls and TLS inspection. While SRTP itself is not directly exploited, the technique leverages the same media relay infrastructure that SRTP protects. Topics include security vulnerabilities in real-time communication, TURN credential reuse, and network defense evasion. The tag is relevant for IT security professionals and system administrators concerned with securing VoIP and video conferencing traffic in enterprise environments.
Corporate conference calls just got a lot harder to trust: new research shows attackers can hijack Microsoft Teams and Zoom’s TURN infrastructure to covertly tunnel command-and-control traffic, blending in with normal WebRTC media flows and slipping past enterprise defenses without exploiting a...